Mindbloom Data Breach Exposes Sensitive Health Records

Yahoo

Mindbloom Data Breach Exposes Sensitive Health Records

First seen 5 Nov 2026, 20:18 UTC • •52.5

Article Content

1 / 5

Browse articles

ThreatCluster •November 5, 2026 at 20:19 UTC

•Mindbloom reported a data breach affecting sensitive patient health records.
•The breach was disclosed on November 3, 2026, to the Vermont Attorney General.
•Affected individuals are encouraged to contact Mindbloom for updates and potential legal action.

Mindbloom Provider Group PA, a mental healthcare provider, reported a data breach affecting sensitive patient records. The breach was disclosed to the Vermont Attorney General on November 3, 2026, but details regarding the attack vector and timeline remain undisclosed. Exposed data includes private health records, treatment plans, and insurance information. Patients are encouraged to contact Mindbloom for updates and resources. Attorneys are investigating the possibility of a class action lawsuit for affected individuals. As of now, no specific information regarding the number of affected individuals has been released.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 10h ago How this analysis works

Timeline

2026-11-03

Mindbloom discloses data breach

Mindbloom Provider Group reported a data breach affecting sensitive health records to the Vermont Attorney General.

More articles in this cluster (4)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (3)

Mindbloom
Mindbloom Provider Group
Mindbloom Provider Group PA

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to Mindbloom
Data Breach related to Mindbloom Provider Group
Data Breach related to Mindbloom Provider Group PA
Data Breach related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track Mindbloom in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What type of information was exposed?

The breach exposed sensitive health records, including diagnoses, treatment plans, and insurance details.

How can affected individuals get updates?

Affected individuals are encouraged to contact Mindbloom directly for the latest information and resources.

Is there a class action lawsuit being considered?

Yes, attorneys are investigating the possibility of a class action lawsuit for those affected by the breach.

Continue Reading

Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…

China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…